This commit is contained in:
Daniel
2025-08-20 07:55:56 +02:00

View File

@@ -25,7 +25,7 @@ spec:
service:
type: ClusterIP
port: 80
servicePort: 80
persistentVolume:
enabled: true
@@ -41,7 +41,16 @@ spec:
memory: 128Mi
prometheus-node-exporter:
enabled: false
enabled: true
containerSecurityContext:
allowPrivilegeEscalation: true
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 65534
runAsGroup: 65534
capabilities:
drop:
- ALL
kubeStateMetrics:
enabled: true
@@ -81,7 +90,7 @@ spec:
namespace: prometheus
syncPolicy:
anagedNamespaceMetadata:
managedNamespaceMetadata:
labels:
pod-security.kubernetes.io/enforce: privileged
pod-security.kubernetes.io/audit: privileged